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Introduction 


The Information Commissioner is producing a direct marketing code 
of practice, as required by the Data Protection Act 2018. A draft of 
the code is now out for public consultation. 


The draft code of practice aims to provide practical guidance and 
promote good practice in regard to processing for direct marketing 
purposes in compliance with data protection and e-privacy rules. 
The draft code takes a life-cycle approach to direct marketing. It 
starts with a section looking at the definition of direct marketing to 
help you decide if the code applies to you, before moving on to 
cover areas such as planning your marketing, collecting data, 
delivering your marketing messages and individuals rights. 


The public consultation on the draft code will remain open until 4 
March 2020.The Information Commissioner welcomes feedback on 
the specific questions set out below. 


You can email your response to directmarketingcode@ico.org.uk 
Or print and post to: 


Direct Marketing Code Consultation Team 
Information Commissioner’s Office 
Wycliffe House 

Water Lane 

Wilmslow 

Cheshire SK9 5AF 


If you would like further information on the consultation, please 
email the Direct Marketing Code team. 


Privacy statement 


For this consultation we will publish all responses received from 
organisations except for those where the response indicates that they 
are an individual acting in a private capacity (eg a member of the 
public). All responses from organisations and individuals acting in a 
professional capacity (eg sole traders, academics etc) will be published 
but any personal data will be removed before publication (including 
email addresses and telephone numbers). 


For more information about what we do with personal data please see 
Our privacy notice 


Q1 Is the draft code clear and easy to understand? 


X 


Yes 
No 
If no please explain why and how we could improve this: 


Q2 Does the draft code contain the right level of detail? (When 
answering please remember that the code does not seek to 
duplicate all our existing data protection and e-privacy guidance) 


xX Yes 
No 
If no please explain what changes or improvements you would like to 
see? 


We welcome the comprehensiveness of the Code and its focus on emerging technologies. 
However, we would also suggest that an example, fully worked through Legitimate 
Interest Assessment for a marketing activity, incorporating the ICO’s LIA template would 
be beneficial. 


Q3 Does the draft code cover the right issues about direct marketing? 


X 


Yes 
No 


If no please outline what additional areas you would like to see 
covered: 


It would be helpful if the Code could: 
e Provide more depth of detail on the implications of using ‘cold’ data 
e Also cover the topic of ‘marketing to employees’. 


Q4 Does the draft code address the areas of data protection and e- 
privacy that are having an impact on your organisation’s direct 
marketing practices? 


X 


Yes 
No 


If no please outline what additional areas you would like to see covered 


Q5 Is it easy to find information in the draft code? 


X 


Yes 
No 


If no, please provide your suggestions on how the structure could be 
improved: 


A simpler one page infographic, that visualises and animates the lifecycle of marketing 
activities and annotates the compliance requirements at each stage, may aid smaller 
businesses. 


Q6 Do you have any examples of direct marketing in practice, good or bad, 
that you think it would be useful to include in the code 


X 


Yes 
No 


If yes, please provide your direct marketing examples : 


e The law requires that withdrawing consent should be as easy as providing it in the first place. 
An example that depicts this in a positive spirit are organisations whose cookie banners offer 
the ability to withdraw consent in the same way as the users provide consent 

e Whilst not an example of direct marketing ‘in practice’, we feel it is relevant to call out exercises 
we have undertaken, in which we have reviewed all processing activities and highlighted the 
lawful basis for each. 


Q7 Do you have any other suggestions for the direct marketing code? 


The focus on data brokerage services is very helpful. However, we would welcome 
additional steer on the relationship between data brokers and those companies who 
commission their services and clarification on their roles as controllers or processors. 


About you 


Q8 Are you answering as: 


O An individual acting in a private capacity (eg someone 
providing their views as a member of the public) 

O An individual acting in a professional capacity 

X On behalf of an organisation 

O Other 


Please specify the name of your organisation: 


Communisis 


If other please specify: 


Q 
Yo) 


How did you find out about this survey? 


X 


ICO Twitter account 

ICO Facebook account 

ICO LinkedIn account 

ICO website 

ICO newsletter 

ICO staff member 

Colleague 

Personal/work Twitter account 
Personal/work Facebook account 
Personal/work LinkedIn account 
Other 

If other please specify: 


a EE 


Thank you for taking the time to complete the survey 


ET EA ESEA E] 


